Re: Object cannot be edited using ADSIEdit
From: Dmitri Gavrilov [MSFT] (dmitrig_at_online.microsoft.com)
Date: 06/28/04
- Next message: Bill Grant: "Re: Workstations sometimes can't see computers in domain"
- Previous message: Mark Renoden [MSFT]: "Re: Windows 2003 DCPROMO Problem"
- In reply to: timg: "Object cannot be edited using ADSIEdit"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 28 Jun 2004 16:53:22 -0600
Did you add Deny Full Control to everyone or something along these lines?
Use dsacls /S to restore default security on the object. It is possible you
will need to take ownership of the object first. Use ADAM's version of
dsacls with /takeOwnership to do this.
-- Dmitri Gavrilov SDE, Active Directory Core This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm "timg" <tim@deltacompsys.com> wrote in message news:10e16d02iborpa3@corp.supernews.com... > I added "Deny" permissions to an address list in Exchange 2003 which are > stored as AD objects (we have Server 2003 running as AD controller). I can > no longer access the object through exchange. So I tried to edit the > permissions from ADSIEdit and I get an error "invalid path". Also tried > deleting the object and got another error. > > When I export the AD tree that object does not display a class type. It > appears that the AD object is seriously corrupted. Any way to fix this? > > Thanx! > >
- Next message: Bill Grant: "Re: Workstations sometimes can't see computers in domain"
- Previous message: Mark Renoden [MSFT]: "Re: Windows 2003 DCPROMO Problem"
- In reply to: timg: "Object cannot be edited using ADSIEdit"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
